GraalVM

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions5
First seenSep 19, 2026
Last mentioned19d ago

Timeline

5 articles · newest first

Oracle emergency Java update distrusts weak eMudhra CAs (CVE-2026-91403)

The CVSS 9.1 JSSE flaw can let an on-path attacker forge trusted hostnames; no attacks are confirmed.

Cyber Security NewsOct 23, 06:01 UTC · 19d agoVulnerabilityCVE-2026-914034 · 2 reads

Researchers Use New CPU Attack to Steal Linux Root Password Hash From Memory

Researchers' Branch Target Reuse attack leaks Linux root password hashes via stale CPU predictions.

Cyber Security NewsOct 1, 09:21 UTC · Oct 1, 2026Exploit / PoCCVE-2026-64507 CVE-2026-645084 · 1 read

Branch Target Reuse: Spectre-v2 Attacks in JIT Engines

VUSec's Branch Target Reuse attack reuses stale JIT branch predictions to speculatively leak memory on Intel CPUs.

Lobsters · securitySep 30, 18:06 UTC · Sep 30, 2026Research5 · 4 reads

Spectre bug is back, this time to haunt JIT engines

Researchers disclose Branch Target Reuse, a Spectre v2 JIT attack that can leak Linux root password hashes.

The Register · SecuritySep 30, 07:01 UTC · Sep 30, 2026ResearchCVE-2026-64507 CVE-2026-645085 · 2 reads

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Unauthenticated RCE CVE-2026-58138 in Orkes Conductor is actively exploited; Fortinet blocked ~7,000 attacks; patch to 3.30.2.

The Hacker NewsSep 19, 08:18 UTC · Sep 19, 2026Exploit / PoCExploitedCVE-2026-581382 · 2 reads

Related CVEs

by mentions

CVE-2026-64507<1%—
Linux kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2…
published Jul 25, 2026Linux kernelPoC
CVE-2026-64508<1%—
Linux kernel: bpf: Support for hardening against JIT spraying
published Jul 25, 2026Linux kernel
CVE-2026-581389%9.3
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
published Jun 30, 2026PoC
CVE-2026-91403<1%9.1
JSSE trust flaw in Oracle Java SE and GraalVM
published 20d agoOracle Java SEPoC

Appears with

Oraclevendor · 4
cBPFproduct · 3
Mozillavendor · 3
Intelvendor · 3
SpiderMonkeyproduct · 3
Linux kernelproduct · 3
Firefoxproduct · 2
VUSecorganization · 2
Fortinetorganization · 1
Fortinetvendor · 1
Orkes Conductorproduct · 1
Scuola Superiore Sant'Annaorganization · 1
Java SEproduct · 1
Empirical Securityorganization · 1
Red Hatorganization · 1
GraalPyproduct · 1

Entities are extracted by the model from each article. First seen Sep 19, 2026, last mentioned 19d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.